Network and edge

Home and small-office routers, cameras and IoT

Small-office routers, home gateways, IP cameras, video recorders and connected devices: often forgotten and rarely updated.

For example: D-Link, TP-Link, NETGEAR, DrayTek, Hikvision.

Category RSS feed

5 vulnerabilities added in the last 12 months
90 exploited vulnerabilities in the catalog, in total
0 added in the last 30 days

Affected brands

In alphabetical order, with their number of vulnerabilities in this category.

Amcrest 1 vulnerability
Arcadyan 1 vulnerability
ASUS 2 vulnerabilities
Cisco 10 vulnerabilities
D-Link 23 vulnerabilities · 2 in the last 12 months
Dahua 2 vulnerabilities
DASAN Zhone (DZS) 2 vulnerabilities
DD-WRT 1 vulnerability · 1 in the last 12 months
Digiever 1 vulnerability · 1 in the last 12 months
DrayTek 5 vulnerabilities
Edimax 1 vulnerability
FXC 1 vulnerability
GeoVision 2 vulnerabilities
Hikvision 2 vulnerabilities · 1 in the last 12 months
NETGEAR 7 vulnerabilities
Netis 1 vulnerability
NUUO 2 vulnerabilities
Pi-hole 1 vulnerability
Plex 1 vulnerability
PTZOptics 2 vulnerabilities
QNAP 1 vulnerability
Realtek 3 vulnerabilities
Reolink 2 vulnerabilities
Smartbedded 1 vulnerability
Sumavision 1 vulnerability
Tenda 3 vulnerabilities
TP-Link 6 vulnerabilities
TVT 1 vulnerability
Zyxel 4 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.

Rank 1
Hikvision IP cameras and recorders (NVR/DVR)CVE-2017-7921
Hikvision Multiple Products Improper Authentication Vulnerability
CVE from 2017, added in 2026
CVSS severity 9.8critical
Added Mar 5, 2026
Rank 2
D-Link Routers (DIR, DWR, DSR)CVE-2022-37055
D-Link Routers Buffer Overflow Vulnerability
CVE from 2022, added in 2025
CVSS severity 9.8critical
Added Dec 8, 2025
Rank 3
Digiever DS-2105 ProCVE-2023-52163
Digiever DS-2105 Pro Missing Authorization Vulnerability
CVE from 2023, added in 2025
CVSS severity 8.8high
Added Dec 22, 2025
Rank 4
DD-WRTCVE-2021-27137
DD-WRT Stack-Based Buffer Overflow Vulnerability
Hunt for compromise (CISA)CVE from 2021, added in 2026
CVSS severity 8.1high
Added Jul 21, 2026
Rank 5
D-Link Routers (DIR, DWR, DSR)CVE-2025-29635
D-Link DIR-823X Command Injection Vulnerability
CVSS severity 7.2high
Added Apr 24, 2026
Rank 6
D-Link Routers (DIR, DWR, DSR)CVE-2024-0769
D-Link DIR-859 Router Path Traversal Vulnerability
CVSS severity 9.8critical
Added Jun 25, 2025
Rank 7
ASUS Routers (RT, GT, ZenWiFi)CVE-2021-32030
ASUS Routers Improper Authentication Vulnerability
CVE from 2021, added in 2025
CVSS severity 9.8critical
Added Jun 2, 2025
Rank 8
DrayTek Vigor (routers)CVE-2024-12987
DrayTek Vigor Routers OS Command Injection Vulnerability
CVSS severity 9.8critical
Added May 15, 2025
Rank 9
GeoVision Cameras and video serversCVE-2024-11120
GeoVision Devices OS Command Injection Vulnerability
CVSS severity 9.8critical
Added May 7, 2025
Rank 10
GeoVision Cameras and video serversCVE-2024-6047
GeoVision Devices OS Command Injection Vulnerability
CVSS severity 9.8critical
Added May 7, 2025

Show 64 more vulnerabilities

Rank 11
Edimax IC-7100 IP CameraCVE-2025-1316
Edimax IC-7100 IP Camera OS Command Injection Vulnerability
CVSS severity 9.8critical
Added Mar 19, 2025
Rank 12
DrayTek Vigor (routers)CVE-2020-15415
DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
CVE from 2020, added in 2024
CVSS severity 9.8critical
Added Sep 30, 2024
Rank 13
Dahua IP Camera FirmwareCVE-2021-33044
Dahua IP Camera Authentication Bypass Vulnerability
CVE from 2021, added in 2024
CVSS severity 9.8critical
Added Aug 21, 2024
Rank 14
Dahua IP Camera FirmwareCVE-2021-33045
Dahua IP Camera Authentication Bypass Vulnerability
CVE from 2021, added in 2024
CVSS severity 9.8critical
Added Aug 21, 2024
Rank 15
D-Link DSL modem-routersCVE-2016-20017
D-Link DSL-2750B Devices Command Injection Vulnerability
CVE from 2016, added in 2024
CVSS severity 9.8critical
Added Jan 8, 2024
Rank 16
Realtek Router SDKs (Jungle, AP-Router)CVE-2014-8361
Realtek SDK Improper Input Validation Vulnerability
CVE from 2014, added in 2023
CVSS severity 9.8critical
Added Sep 18, 2023
Rank 17
Zyxel Home gateways and routers (DSL, CPE)CVE-2017-18368
Zyxel P660HN-T1A Routers Command Injection Vulnerability
CVE from 2017, added in 2023
CVSS severity 9.8critical
Added Aug 7, 2023
Rank 18
D-Link Routers (DIR, DWR, DSR)CVE-2019-17621
D-Link DIR-859 Router Command Execution Vulnerability
CVE from 2019, added in 2023
CVSS severity 9.8critical
Added Jun 29, 2023
Rank 19
D-Link Routers (DIR, DWR, DSR)CVE-2018-6530
D-Link Multiple Routers OS Command Injection Vulnerability
RansomwareCVE from 2018, added in 2022
CVSS severity 9.8critical
Added Sep 8, 2022
Rank 20
NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2017-6862
NETGEAR Multiple Devices Buffer Overflow Vulnerability
CVE from 2017, added in 2022
CVSS severity 9.8critical
Added Jun 8, 2022
Rank 21
NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2016-10174
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
CVE from 2016, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
Rank 22
NETGEAR Wi-Fi access points (WAC, WNAP)CVE-2016-1555
NETGEAR Multiple WAP Devices Command Injection Vulnerability
CVE from 2016, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
Rank 23
Cisco RV routers (Small Business)CVE-2018-0125
Cisco VPN Routers Remote Code Execution Vulnerability
CVE from 2018, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
Rank 24
NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2017-6077
NETGEAR DGN2200 Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 9.8critical
Added Mar 7, 2022
Rank 25
Cisco RV routers (Small Business)CVE-2022-20699
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Mar 3, 2022
Rank 26
Cisco RV routers (Small Business)CVE-2022-20700
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Mar 3, 2022
Rank 27
Hikvision IP cameras and recorders (NVR/DVR)CVE-2021-36260
Hikvision Improper Input Validation
CVSS severity 9.8critical
Added Jan 10, 2022
Rank 28
Realtek Router SDKs (Jungle, AP-Router)CVE-2021-35394
Realtek Jungle SDK Remote Code Execution Vulnerability
CVSS severity 9.8critical
Added Dec 10, 2021
Rank 29
Tenda Wi-Fi routersCVE-2018-14558
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
CVE from 2018, added in 2021
CVSS severity 9.8critical
Added Nov 3, 2021
Rank 30
Sumavision Enhanced Multimedia Router (EMR)CVE-2020-10181
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
Rank 31
Tenda Wi-Fi routersCVE-2020-10987
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
Rank 32
D-Link Routers (DIR, DWR, DSR)CVE-2020-29557
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
Rank 33
DrayTek Vigor (routers)CVE-2020-8515
Multiple DrayTek Vigor Routers Web Management Page Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
Rank 34
Arcadyan Buffalo FirmwareCVE-2021-20090
Arcadyan Buffalo Firmware Path Traversal Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
Rank 35
Tenda Wi-Fi routersCVE-2021-31755
Tenda AC11 Router Stack Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
Rank 36
Realtek Router SDKs (Jungle, AP-Router)CVE-2021-35395
Realtek AP-Router SDK Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
Rank 37
PTZOptics PT30X-SDI/NDI CamerasCVE-2024-8956
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
CVSS severity 9.1critical
Added Nov 4, 2024
Rank 38
Smartbedded MeteobridgeCVE-2025-4008
Smartbedded Meteobridge Command Injection Vulnerability
CVSS severity 8.8high
Added Oct 2, 2025
Rank 39
TP-Link Range extenders and access points (TL-WA, RE)CVE-2020-24363
TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
CVE from 2020, added in 2025
CVSS severity 8.8high
Added Sep 2, 2025
Rank 40
D-Link DCS camerasCVE-2020-25079
D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
CVE from 2020, added in 2025
CVSS severity 8.8high
Added Aug 5, 2025
Rank 41
D-Link DNR video recorders (NVR)CVE-2022-40799
D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
CVE from 2022, added in 2025
CVSS severity 8.8high
Added Aug 5, 2025
Rank 42
TP-Link TL-WR (Wi-Fi routers)CVE-2023-33538
TP-Link Multiple Routers Command Injection Vulnerability
CVE from 2023, added in 2025
CVSS severity 8.8high
Added Jun 16, 2025
Rank 43
ASUS Routers (RT, GT, ZenWiFi)CVE-2023-39780
ASUS RT-AX55 Routers OS Command Injection Vulnerability
CVE from 2023, added in 2025
CVSS severity 8.8high
Added Jun 2, 2025
Rank 44
Zyxel Home gateways and routers (DSL, CPE)CVE-2024-40890
Zyxel DSL CPE OS Command Injection Vulnerability
CVSS severity 8.8high
Added Feb 11, 2025
Rank 45
Zyxel Home gateways and routers (DSL, CPE)CVE-2024-40891
Zyxel DSL CPE OS Command Injection Vulnerability
CVSS severity 8.8high
Added Feb 11, 2025
Rank 46
QNAP VioStor NVRCVE-2023-47565
QNAP VioStor NVR OS Command Injection Vulnerability
CVSS severity 8.8high
Added Dec 21, 2023
Rank 47
FXC AE1021, AE1021PECVE-2023-49897
FXC AE1021, AE1021PE OS Command Injection Vulnerability
CVSS severity 8.8high
Added Dec 21, 2023
Rank 48
Zyxel Home gateways and routers (DSL, CPE)CVE-2017-6884
Zyxel EMG2926 Routers Command Injection Vulnerability
RansomwareCVE from 2017, added in 2023
CVSS severity 8.8high
Added Sep 18, 2023
Rank 49
TP-Link Archer (Wi-Fi routers)CVE-2023-1389
TP-Link Archer AX-21 Command Injection Vulnerability
CVSS severity 8.8high
Added May 1, 2023
Rank 50
Cisco RV routers (Small Business)CVE-2019-15271
Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
CVE from 2019, added in 2022
CVSS severity 8.8high
Added Jun 8, 2022
Rank 51
NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2016-6277
NETGEAR Multiple Routers Remote Code Execution Vulnerability
CVE from 2016, added in 2022
CVSS severity 8.8high
Added Mar 7, 2022
Rank 52
Amcrest Cameras and Network Video Recorder (NVR)CVE-2020-5735
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
CVSS severity 8.8high
Added Nov 3, 2021
Rank 53
NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2017-5521
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
CVE from 2017, added in 2022
CVSS severity 8.1high
Added Sep 8, 2022
Rank 54
Cisco RV routers (Small Business)CVE-2022-20703
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
CVSS severity 8.0high
Added Mar 3, 2022
Rank 55
Cisco RV routers (Small Business)CVE-2022-20708
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
CVSS severity 8.0high
Added Mar 3, 2022
Rank 56
D-Link Access points (DAP, DWL)CVE-2019-20500
D-Link DWL-2600AP Access Point Command Injection Vulnerability
CVE from 2019, added in 2023
CVSS severity 7.8high
Added Jun 29, 2023
Rank 57
Cisco RV routers (Small Business)CVE-2022-20701
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
CVSS severity 7.8high
Added Mar 3, 2022
Rank 58
D-Link DCS camerasCVE-2020-25078
D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
CVE from 2020, added in 2025
CVSS severity 7.5high
Added Aug 5, 2025
Rank 59
DrayTek VigorConnectCVE-2021-20123
Draytek VigorConnect Path Traversal Vulnerability
CVE from 2021, added in 2024
CVSS severity 7.5high
Added Sep 3, 2024
Rank 60
DrayTek VigorConnectCVE-2021-20124
Draytek VigorConnect Path Traversal Vulnerability
CVE from 2021, added in 2024
CVSS severity 7.5high
Added Sep 3, 2024
Rank 61
TP-Link Archer (Wi-Fi routers)CVE-2015-3035
TP-Link Multiple Archer Devices Directory Traversal Vulnerability
CVE from 2015, added in 2022
CVSS severity 7.5high
Added Mar 25, 2022
Rank 62
Cisco RV routers (Small Business)CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
CVE from 2019, added in 2021
CVSS severity 7.5high
Added Nov 3, 2021
Rank 63
Netis WF2419 DevicesCVE-2019-19356
Netis WF2419 Devices Remote Code Execution Vulnerability
CVE from 2019, added in 2021
CVSS severity 7.5high
Added Nov 3, 2021
Rank 64
TVT NVMS-1000CVE-2019-20085
TVT NVMS-1000 Directory Traversal Vulnerability
CVE from 2019, added in 2021
CVSS severity 7.5high
Added Nov 3, 2021
Rank 65
TP-Link Archer (Wi-Fi routers)CVE-2025-9377
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
CVSS severity 7.2high
Added Sep 3, 2025
Rank 66
Cisco RV routers (Small Business)CVE-2023-20118
Cisco Small Business RV Series Routers Command Injection Vulnerability
CVE from 2023, added in 2025
CVSS severity 7.2high
Added Mar 3, 2025
Rank 67
Reolink IP camerasCVE-2019-11001
Reolink Multiple IP Cameras OS Command Injection Vulnerability
CVE from 2019, added in 2024
CVSS severity 7.2high
Added Dec 18, 2024
Rank 68
Reolink IP camerasCVE-2021-40407
Reolink RLC-410W IP Camera OS Command Injection Vulnerability
CVE from 2021, added in 2024
CVSS severity 7.2high
Added Dec 18, 2024
Rank 69
PTZOptics PT30X-SDI/NDI CamerasCVE-2024-8957
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
CVSS severity 7.2high
Added Nov 4, 2024
Rank 70
Plex Media ServerCVE-2020-5741
Plex Media Server Remote Code Execution Vulnerability
CVE from 2020, added in 2023
CVSS severity 7.2high
Added Mar 10, 2023
Rank 71
Cisco RV routers (Small Business)CVE-2019-1652
Cisco Small Business Routers Improper Input Validation Vulnerability
CVE from 2019, added in 2022
CVSS severity 7.2high
Added Mar 3, 2022
Rank 72
Pi-hole AdminLTECVE-2020-8816
Pi-Hole AdminLTE Remote Code Execution Vulnerability
CVSS severity 7.2high
Added Dec 10, 2021
Rank 73
TP-Link TL-WR (Wi-Fi routers)CVE-2023-50224
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
CVE from 2023, added in 2025
CVSS severity 6.5medium
Added Sep 3, 2025
Rank 74
D-Link DSL modem-routersCVE-2013-5223
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
CVE from 2013, added in 2022
CVSS severity 5.4medium
Added Mar 25, 2022

End of life: remove

These products are no longer supported: no patch is coming. Remove them or isolate them from the network.

NUUO NVRmini / NVRmini2CVE-2018-14933
NUUO NVRmini Devices OS Command Injection Vulnerability
End of lifeCVE from 2018, added in 2024
CVSS severity 9.8critical
Added Dec 18, 2024
NUUO NVRmini / NVRmini2CVE-2022-23227
NUUO NVRmini2 Devices Missing Authentication Vulnerability
End of lifeCVE from 2022, added in 2024
CVSS severity 9.8critical
Added Dec 18, 2024
D-Link Routers (DIR, DWR, DSR)CVE-2023-25280
D-Link DIR-820 Router OS Command Injection Vulnerability
End of life
CVSS severity 9.8critical
Added Sep 30, 2024
D-Link Routers (DIR, DWR, DSR)CVE-2014-100005
D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
End of lifeCVE from 2014, added in 2024
CVSS severity 8.0high
Added May 16, 2024
D-Link Routers (DIR, DWR, DSR)CVE-2021-40655
D-Link DIR-605 Router Information Disclosure Vulnerability
End of lifeCVE from 2021, added in 2024
CVSS severity 7.5high
Added May 16, 2024
D-Link Routers (DIR, DWR, DSR)CVE-2011-4723
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
End of lifeCVE from 2011, added in 2022
CVSS severity 5.7medium
Added Sep 8, 2022
D-Link Routers (DIR, DWR, DSR)CVE-2022-26258
D-Link DIR-820L Remote Code Execution Vulnerability
End of life
CVSS severity 9.8critical
Added Sep 8, 2022
D-Link Routers (DIR, DWR, DSR)CVE-2021-45382
D-Link Multiple Routers Remote Code Execution Vulnerability
End of life
CVSS severity 9.8critical
Added Apr 4, 2022
DASAN Zhone (DZS) Gigabit Passive Optical Network (GPON) RoutersCVE-2018-10561
Dasan GPON Routers Authentication Bypass Vulnerability
End of lifeCVE from 2018, added in 2022
CVSS severity 9.8critical
Added Mar 31, 2022
DASAN Zhone (DZS) Gigabit Passive Optical Network (GPON) RoutersCVE-2018-10562
Dasan GPON Routers Command Injection Vulnerability
RansomwareEnd of lifeCVE from 2018, added in 2022
CVSS severity 9.8critical
Added Mar 31, 2022

Show 6 more vulnerabilities

D-Link and TRENDnet routersCVE-2015-1187
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
End of lifeCVE from 2015, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
D-Link DCS camerasCVE-2016-11021
D-Link DCS-930L Devices OS Command Injection Vulnerability
End of lifeCVE from 2016, added in 2022
CVSS severity 7.2high
Added Mar 25, 2022
NETGEAR Routers (DGN, WNR, Nighthawk)CVE-2017-6334
NETGEAR DGN2200 Devices OS Command Injection Vulnerability
End of lifeCVE from 2017, added in 2022
CVSS severity 8.8high
Added Mar 25, 2022
D-Link Routers (DIR, DWR, DSR)CVE-2019-16920
D-Link Multiple Routers Command Injection Vulnerability
End of lifeCVE from 2019, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
D-Link Routers (DIR, DWR, DSR)CVE-2020-9377
D-Link DIR-610 Devices Remote Command Execution
End of lifeCVE from 2020, added in 2022
CVSS severity 8.8high
Added Mar 25, 2022
D-Link Routers (DIR, DWR, DSR)CVE-2015-2051
D-Link DIR-645 Router Remote Code Execution Vulnerability
End of lifeCVE from 2015, added in 2022
CVSS severity 8.8high
Added Feb 10, 2022

Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.

Affected brands

See also

Patch first

End of life: remove

Follow and verify